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Answer the following questions by clearly circling the most appropriate answer ( 1 point each) 


1. Implements the security policies of the data processing systems and information transfers of an 
organization 

© Security service 
^ b. Security architecture 

c. Security attack 

d. Security mechanism 


2. Access Control mechanism 

a. Ensures the identity of an entity 
^ (Q Enforces access rights to resources 

c. Enhances detection of security relevant events 

d. Enables the selection of particular physical secure route 

3. A person in possession of a sample of ciphertext and corresponding plaintext is capable of what 
type of attack? 

a. Ciphertext only 

b. Chosen-plaintext 
Known-plaintext 

d. Plaintext only 

4. What type of cryptanalytic attack where an adversary has the least amount of information to 
work with? 

a. Known-plaintext 
. (b) Ciphertext-only 

c. Plaintext-only 

d. Chosen-ciphertext 


5. What encryption operation is used when AES uses S-boxes during the process of encryption? 

a. Chaining 

b. Key exchange 

c. Key generation 
^ (cD Substitution 

6. Which of the following encryption methods is considered unbreakable? 

© One-time pads 
x b. DES codebooks 

c. Symmetric ciphers 

d. Elliptic-curve cryptography 
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7. If block size is n and n is big, then we need 2xnx2 n table for key. Which is a big table, a good 
solution to reduce key size would be 



Use alternating sequence of substitutions and permutations 
Approximate random mapping by components controlled by the key 
Process block using key to produce output that is diffuse and confused.. 

Use two or more ciphers as simple encryption operations with same key done repeatedly 


8. What is the main component in a Feistel network that is responsible for diffusion - 

a. The S-box 

b. The subkeys 

/© The swap operation 

d. The initial permutation (IP) 

9. DES creates 16 subkeys from a key. Which of the following can be considered a weak key: 

a. Weak keys: keys with more ones than zeros 

b. Weak keys: keys with more zeros than ones. 

c. Weak keys: keys that make all subkeys to be different. 

JQ Weak keys: keys make the same subkey to be generated in more than one round. 


10. In cryptography, a strong encryption algorithm assumes that if an attacker knows the plaintext 
and the ciphertext, it is still infeasible for him to know the key. This assumption is based on the 
concept of, 



Feistel 

Diffusion 

Confusion 

avalanche 
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1. List one passive attack and one active attack. 


[ 2 points ] 
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2. Why playfair algorithm is better than mono-alphabet? 


[ 2 points ] 
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3. Playfair and polyalphabet algorithms both use a keyword. However, polyalphabet is considered 

better than playfair. Why? [ 2 points ] 

eCRASC cW^WiVk'6, Wause 

€'\Je/y \^ 0 W ^-jclW \ 0 -f^/c 4 © '| ' W/i 
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4. How to improve block ciphers? List two [ 2 points ] 
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5. Construct a playfair matrix with the key Techno and encrypt the following message Generaly. 

[ 4 points ] 
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[ 4 points ] 
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6. Given the following symbols used in DES { L 0 , R 0/ F, XOR, Li, R lf l< 2 } 


Write the encryption equations to produce L a and Ri for one round of DES from L 0 and R 0 
^•i ~Ro 

- L~<? 0 f (Ro/ kv\ 

ii. Write the decryption equations to produce L 0 and R 0 from L a and Ri calculated in (a) and 
prove the equality. , •> _ , , n . . _ , ^ 

= G> F(hyh) ( Ko= ho© o 


^ ®fM 

7. Answer the following questions relating to modes of operation 



u© r/£ ^ ° - Lo ~ 


[ 4 points ] 
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( a ) Kncrypuon 



a. What is the name of the mode of operation illustrated in the above diagram. 

dpW block CWunutCj ^ 

b. List one advantage 

~ ^ I oc c-^Vcf eack 


c. List two limitations 



v ^ l/ 'si iio vtf XV" fet(Cjtf&/- 


1. Why DES has 16 rounds? 



[ 2 points ] 
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2. What improvement does 3DES exhibit over DES? 


[ 1 point ] 


mwcK St>e, ^oce <T , s Ua/i*' f Q 

h>du I'd 


3. Why 3DES performs E-D-E and not E-E-E ? (E for Encryption, D for Decryption) [ 1 points ] 

bcfc <2,vA C ^ p ^ ‘ ^ l5 <f »A( V '&\ Gvvl fo P f I Ovv^A i f v/^o 

^Aas<£ c7^ £>a£L j \ f w/i\| uu <2 C(/l ffe 5£? 

4. The S-box is a permutation of all 256-bit values and therefore it is fixed. What it is the main 

criteria in the design of S-box values. [ 1 points ] 

b {Wile. SuUTuUoa 4 itflcv (confat'on) , J} yUJV 

^ /Pnci ij l^y ^ + o (jlptaiKv ^4. jc^A)- 


5. One round of AES consists of four main operations: 
ByteSub, ShiftRow, MixColumn and AddRoundKey. 


[ 1 points ] 


How AES performs Decryption for the above operations? > ^ \^S \ \bt. \tyV&SQ? 

- Aii/bu<vA ke«j • •,{ i„ -|kd 
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6. In DES, encryption function is the same as decryption function. In AES decryption is different than 
encryption. Explain what modifications are needed to make AES decryption function similar to 
encryption function. [ 2 points ] 

■|U oft/cw M, because 11 
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7. Is AES a Fiestel Cipher? Why? 

Mv i if ifc^oAxV^* 

8. Explain why in one-time pad algorithm repeating the key is not secure. 


[ 1 point ] 


[ 1 point ] 
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